CVE-2019-10485

Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098...

CVE-2019-10485

CVE-2019-10485 involves an infinite loop when decoding compressed data that can cause an overrun condition in various Snapdragon platforms (Auto, Compute, IoT, Mobile, Wearables, etc.). The issue affects a broad set of Qualcomm/Snapdragon components and is driven by a decoding loop condition, as ...

PT-2019-11878

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions APQ8009 through SDM850 Snapdragon Compute versions APQ8009 through SDM850 Snapdragon Consumer IOT versions APQ8009 through SDM850 Snapdragon Industrial IOT versions APQ8009 through SDM850 Snapdragon IoT versions APQ800...

CVE-2019-10485: Loop with Unreachable Exit Condition

Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098...

e1000e Virtual Network Adapter Code Execution System Failure

The vulnerability of the e1000e virtual network adapter in VMware Workstation and VMware Fusion lies in the fact that data is written beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

Google Chrome WebRTC Data Compromise

The vulnerability in the Google Chrome browser’s WebRTC implementation arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Intel BMC Buffer Overflow DoS

The vulnerability of the microprogrammed software of the Intel Baseboard Management Controller BMC relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure...

PDFium Heap Buffer Overflow DoS

The vulnerability of the PDFium component in the Google Chrome browser is related to a unit not being properly accounted for. Exploiting this vulnerability allows a malicious actor to perform write-offs beyond the buffer in memory using a specially created PDF file...

Microsoft Excel Office SharePoint Server Buffer Overflow Information Disclosure

The vulnerability of Microsoft Excel, Office, Office 365, Microsoft SharePoint Enterprise Server, and Office Online Server packages relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Skia Library Arbitrary File Write

The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome relates to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the device’s file system remotely...

Windows Jet Database Engine Code Execution

The vulnerability of the Windows Jet Database Engine component in the operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

PDFium PDF Content Processor Code Execution

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers relates to the writing beyond the buffer memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

libX11 Heap Buffer Overflow DoS

The vulnerability of the XListExtensions function ListExt.c in the client API library for the X Window System libX11 is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

FAAD2 mp4ff_read_stco Heap Buffer Overflow DoS

The vulnerability of the mp4ffreadstco function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a...

VLC libflacplugin DLL Code Execution

The vulnerability of the plugins\codec\libflacplugin.dll library in the VideoLAN VLC media player is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially...

GraphicsMagick ReadPNMImage Buffer Overflow DoS

The vulnerability of the ReadPNMImage function coders/pnm.c in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a system failure...

QEMU hardware emulation software Heap Buffer Overflow DoS

The vulnerability of functions mode4and5 in the QEMU hardware emulation software hw/display/cirrusvga.c is related to writing beyond the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure...

GraphicsMagick Heap Buffer Overflow DoS

The vulnerability of the GetStyleTokens function coders/svg.c:314:12 in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service...

GraphicsMagick Heap Buffer Overflow DoS

The vulnerability of the GetStyleTokens function coders/svg.c:311:12 in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service...

TP-Link TL-WR840N Buffer Overflow

The vulnerability of TP-Link TL-WR840N router’s microprogramming software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure through fragmented packets...